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a first electronic unit that transfers electronic money to another electronic 
transaction apparatus, stores electronic money, and is programmed to include a 
transaction log function that stores electronic money transfer data, where said 
data describes electronic money transfers completed by said first electronic unit 
during purchase transactions and includes date of transfer and amount of 
transfer; „ -\ 

a second electronic unit that receives receipt data from another electronic 
transaction apparatus, wherein said receipt data includes a list of items 

-a 

cf purchased, and where said second electronic unit is programmed to include a 



\ $p transaction log function that stores post-transaction receipt data; [and] 

4 _ 

wherein said host processor, said first electronic unit, and said second 




electronic unit are electronically connected for communication; and 

wherein said first electronic unit is a money module and said second 
electronic unit is a trusted agent. 



17. (Amended) An electronic purchase transaction method, comprising the steps of: 
sending electronic money from a money module of a first transaction 

apparatus to a second transaction apparatus during purchase transactions; 

sending receipt data from said second transaction apparatus to a trusted 

agent of said first transaction apparatus; 
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storing in said first transaction apparatus electronic money transfer data 
during said purchase transactions, where said data includes date of transfer and 
amount of transfer; and 

storing in said first transaction apparatus post-transaction receipt data that 
lists items purchased. 



19. (New) A tamper-proof electronic transaction device comprising: 
an external interface; 

an electronic processor in communication with said external interface; 

a memory that stores a unique digital certificate associated only with said 
transaction device, where said digital certificate includes a unique identifier, a 
public key, and a digital signature; 

a key generator that generates a public and private key pair, wherein said 
public key is included within said digital certificate; and 

wherein said key generator includes a random number generator, and 
said digital certificate includes a unique device identifier and said digital 
signature is provided by a security server which creates said digital certificate. 
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